mirror of
https://github.com/yamadashy/repomix.git
synced 2026-10-22 05:15:16 +02:00
cc7d2ab744
intent(file-processors): address logic/test findings from Fable, Claude, Gemini, and CodeRabbit reviews on PR #1720 decision(windows-exec): keep execFile with a shell + windowsVerbatimArguments rather than switching to exec (Gemini's suggestion) — the issue explicitly requires execFile/spawn over exec for injection safety, and verbatim args fix the cmd.exe quoting bug directly decision(timeout-kill): SIGKILL the direct shell child on timeout so a SIGTERM-trapping tool cannot hang the pack and pin a semaphore slot; full descendant/process-tree teardown is left as a documented v1 limitation improve(diagnostics): surface the command's stderr (capped) in the failure message, and distinguish timeout/stdout-overflow from a plain non-zero exit improve(empty-output): warn when a processor exits 0 but blanks a previously non-empty file (a common footgun), while still accepting empty output constraint(gate-tests): add the security-critical regression guards — repomixConfigFileSchema strips enableFileProcessors, mergeConfigs only honors it from the CLI config, remoteAction gates it on --remote-trust-config, and the packager threads transformed content into the security scan and metrics improve(tests): tighten the concurrency assertion (peak > 1, not just > 0) and cover cross-root semaphore sharing, empty-stdout, stderr propagation, real exit/timeout, and multi-{file} substitution Co-authored-by: Samsen879 <Samsen879@users.noreply.github.com> Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>